MAL-2025-112215 Malicious code in proposed_tuna_scarlet-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ea62ac886b22065fff0951c12f826353cca89d2faa330ae6b898cfad0237f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111951 Malicious code in gothic_cobra_harlequin-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334bdd6149c3412a828de84354a9f9e111cfb06dcd82c8364d9cf2d1b05b63c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112009 Malicious code in improved_trout_turquoise-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592a7121839c91a75cde8d17fda76d8cf2ea965afd6fcbe42894c35bc286419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111995 Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112230 Malicious code in racial_flamingo_amber-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07934d707b12f8ab539dae3fa35b7eccbc4cea3302b51be66f7c20278691c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112419 Malicious code in unchanged_tiglon_emerald-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c580c49249e2af6f3b24ecfe3bd0a32cf75b78b373417b418bf8c4ed6ef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112288 Malicious code in separate_leech_indigo-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d019b3e20ff49c0da1111a6f950d0e2d9fcd93ce655e53d69dd119e54aec68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111990 Malicious code in huge_piranha_white-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9956c57c0a5da66e403032e9d865038392e741ef7f23b5509230fead69cd306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urygox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bd0e18c1f72d3369130aa5449ce239fe95d979cfc0b6d4ee6d26b1f4bde39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mussgdhroom-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5821da305ba2ec9dd9874b134f1403909431416a9d76372e871f9384571da175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual_crawdad-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3786748fea4f909dcb5b847d405e2579fcaa299e90e016f672a38d090850813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_alligator-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a2ef94cbba2f4172716c09df6e09f954fcc8b0b870284b4cf3a6a261e07b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 729dbac887325a67e5530bec1db64101e12662b2aa46fb5bc17129b1c4adc322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pefsas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc8e2dbd88bda7b5243c4f104741705ea8895581f5098e8f646318c781c9272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_mouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93661f6ab4a1d3f7ae647580f55c70dfd3edfb722a7fcdc042f5649174b492b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ba786dcf090ce3643cb49cc06eafe04d049f0e15a7584bcaba5e610433cd8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_rodent-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b53003acbb4bb35b93ae9ac8c8f57445984398cb38141a4a82cf861cc1ac2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dabafad5887d52174c586751d856ecaa4c519f340e048b8e17b46b143a07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chilly_koala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58766cc19e043b0c7296e7527c1711ecc1c3ff4fca5eb4028f7e1eddf46381c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...